Personal Data means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
We may change this Statement from time to time by updating this page. If We make any material changes to this Statement, We will notify you by including a prominent notice on the website before the changes are effective . Please check this page from time to time for updates. By using our websites, blog, subscribing to our newsletter, taking our quiz, becoming an affiliate partner, and using any of our other services, you consent to our collection and use of your Personal Data as described in this Statement.
Legal Basis for Processing Personal Data
We may use Personal Data for our legitimate business interest that include marketing our goods and services, running Our business, as well as engaging and developing great talent. Our processing of Personal Data collected from Our websites is based primarily on this justification. However, some uses of Personal Data is necessary to comply with applicable legal or regulatory requirements.
Types of Data We Collect
This section describes the categories of Personal Data we may have collected about you in the past 12 months. It also describes the categories of Personal Data we may continue to collect and our uses of it. Contact information and other identifiers, such as your name, email address, phone number, physical addresses, date of birth (optional) account number if applicable, and identifying information of people that you refer to Us.
- Unique device and online identifiers, such as IP address, device IDs, browsing history, geographical information and other similar identifiers
- Demographic information, such as age, family member information
- Commercial and financial information, such as records of products or services purchased, obtained or considered
- Internet or other electronic activity information, such as information regarding your interaction with our website or application, calls and emails sent and received
- Audio, electronic, visual, thermal, or olfactory information, such as photographs you provide to us or post on our websites
- Educational, professional information, individual profiles, preferences, characteristics, behavior, geolocation, income, and skincare usage from surveys we conduct.
Sources from which we collect Personal Data
We collected the categories of Personal Data described above from the following sources: you or other individuals who may have provided your name or contact information to Us in connection with a referral program and automated collection on Our websites and applications, including through cookies as described in greater detail below. Even though we can automatically process Personal Data, We will not use solely automated means of processing your Personal Data in such a way to have any significantly adverse impact to you.
Please note that information which cannot reasonably be related to you, directly or indirectly, is not considered Personal Data and is not subject to this Statement.
How We Use the Information We Collect
With respect to each of the categories of Personal Data above, this section describes the reasons we may have collected and used such data in the past 12 months and how we may continue to collect and use it:
- To ensure that content from Our site is presented in the most effective manner for you and for your computer.
- To provide you with the information, products and services that you request from Us or which We feel may interest you.
- To facilitate your participation in interactive features of Our sites.
- To notify you about changes to what We do.
- To protect the integrity of Our website, Our services, and Our reputation.
- To prosecute or defend legal claims.
- To protect other users of Our websites, and to ensure no unlawful or unethical activity occurs through Our systems.
We may also use your Personal Data, or permit selected third parties to use your Personal Data, to provide you with information about goods and services which may be of interest to you and We or they may contact you about these by post or telephone.
We will not sell, distribute or lease your Personal Data to third parties except as described in this Statement, as permitted by law, or are required by law to do so. We may use your Personal Data to send you promotional information about third parties which We think you may find interesting if you tell us that you wish this to happen.
If you do not want us to use your Personal Data in this way, or to pass your details on to third parties for marketing purposes, please indicate your choice on the relevant box on the form when We collect your Personal Data.
Categories of Third Parties with which we have Shared Personal Data
We have in the last 12 months disclosed for a business purpose and may continue to disclose for a business purpose (to the extent relevant to the purpose for which we collect Personal Data), the categories of Personal Data above with the following categories of third parties:
- service providers, including payment processors, entities that facilitate shipping, and providers of customer relationship management tools, information technology providers, companies that facilitate connections with our customers and their referrals;
- third parties to comply with legal or regulatory obligations or in response to valid legal requests, to detect and protect against fraud or any technical or security vulnerabilities, to respond to an emergency or otherwise to protect the rights, property, safety, or security of our business, third parties, or the public.
- our internet, IT, telecommunications and other service providers, including legal advisers, accountants, payroll administrators, client relationship management services, insurance and employee benefits providers and administrators;
- any person, as directed by you; or
- any person to whom we transfer any of our rights or obligations under any agreement, or in connection with a sale, merger or consolidation of our business or other transfer of our assets, whether voluntarily or by operation of law, or who is otherwise deemed to be our successor or transferee.
The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Categories of Personal Data we Sell
We do not sell personal data obtained about our customers or other consumers.
How We Use IP Addresses and Cookies
You can find out more about this type of technology through your internet browser.
The system may also use web beacons which are similar but not identical to cookies in the way they operate. You can find out more about web beacons on Wikipedia.
If you are only browsing Our website and have not logged in, We will not ask you to directly submit in any Personal Data. However, certain information (which may be considered Personal Data) - including computer and connection information, browser type and version, operating system and platform details and the time of accessing the website – will be automatically collected. This technology helps Us to improve Our site and to deliver a better and more personalized service. It helps Us:
- To estimate Our audience size and usage pattern.
- To store information about your preferences, and so allow Us to customize Our site according to your individual interests.
- To speed up your searches.
- To recognize you when you return to Our site.
We do use third-party cookies on our Sites, as well as third party provided web beacons. This is to help Us and our partners track your interests and make sure that any advertising content you may receive as a result of your visits to this site are relevant to your interests. For information on all of these categories of cookies, and for more information generally on cookies please refer to aboutcookies.org.
SMS Abandoned Cart Disclosure
The major browsers have attempted to implement the draft “Do Not Track” (“DNT”) standard of the World Wide Web Consortium (“W3C”) in their latest releases. As this standard has not been finalized, Our sites are not compatible with DNT. We do not recognize DNT instructions or any other automated browser signals regarding tracking mechanisms.
Where we Store Your Data
We are a global business. As a result the data that We collect from you may be transferred to, and stored at any of Our locations; which may be inside or outside the European Economic Area ("EEA"). Our primary servers are in the United States of America. Data may also be processed by staff around the world working for Us, or for one of Our suppliers. These staff maybe engaged in, among other things, the fulfillment of your information requests, or the provision of support services. By submitting your Personal Data, you agree to this transfer, storing, or processing. We will store Personal Data we collect about you as long as it is necessary to fulfill the purposes for which we collected it or where there is a legal obligation - laws or regulations that may set a minimum period for which we have to keep your personal data.
Links to Other Websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that We do not have any control over that other website. Therefore, We cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Personal Data of Minors
Our website is not directed to minors under the age of 16. We do not knowingly collect or sell the Personal Data of minors under 16.
California Residents' Rights
If you are a California resident whose information is covered by the California Consumer Privacy Act (“CCPA”), you may have the following rights. The CCPA includes exemptions from certain of its provisions for information about our personnel (including employees, directors, officers, and contractors) and job applicants as well as information processed exclusively in the business-to-business context (e.g., information about an individual acting in his or her capacity as a representative of an entity).
Right to request disclosure of Personal Data
You can submit a request to Us for the following Personal Data:
- The categories of Personal Data We’ve collected about you.
- The categories of sources from which We collected the Personal Data.
- The business or commercial purposes for which We collected or sold the Personal Data.
- The categories of third parties with which We shared Personal Data
- The categories of third parties to whom We sold Personal Data
- The specific pieces of Personal Data We collected.
We are also committed to ensuring that you know what information we share about you. You can submit a request to us for the following further information:
- The categories of personal data we’ve sold about you, and the categories of third parties to which we’ve sold that data
- The categories of personal data that we’ve disclosed about you for a business purpose.
Our responses to any of these requests will cover the 12-month period preceding our receipt of the request. Note that requests can be submitted on behalf of yourself individually or on behalf of your household, provided that we can verify that the request comes from each member of your household.
Right to request deletion of Personal Data
Upon request, We will delete the personal data we have collected about you that is covered by the CCPA, except for situations where specific information is necessary for us to: provide you with a product or service that you requested; perform a contract we entered into with you; maintain the functionality or security of our systems; or comply with or exercise the rights provided by the law. The law also permits us to retain specific data for our exclusively internal use, but only in ways that are compatible with the context in which you provided the data to us or that are reasonably aligned with your expectations based on your relationship with us.
How to exercise your CCPA rights
To exercise your right to request the disclosure of your personal data, to ask us to delete your personal data, either email us at email@example.com or contact us at (530)-539-4406. Depending on the nature of your request, we may ask you for information to verify your request and identity and a declaration attesting to your identity, signed under penalty of perjury. We will respond to requests for access or deletion as soon as practicable and in any event generally not more than within 45 days after receipt of your request. We may extend this period to 90 days in some cases. Please note that you may designate an agent to submit requests on your behalf.
Shine the Light
California Civil Code Section 1798.83 requires any operator of a website to permit its California-resident customers to request and obtain from the operator a list of what personal information the operator disclosed to third parties for direct marketing purposes, for the preceding calendar year; and the addresses and names of such third parties. Should you desire a list of those entities we share personal data collected from this site with third parties for their direct marketing purposes, please contact us at firstname.lastname@example.org.
In addition to the rights spelled out in this statement, in some countries you may have the right to exercise a number of legal rights in relation to restricting the processing of your personal information that we hold about you and you can exercise your rights by contacting us using the details set out below.
These rights include: obtaining and accessing information regarding the processing of your personal information, requesting that we erase your personal information in certain circumstances, objecting to, and requesting that we restrict, our processing of your personal information in certain circumstances, lodging a complaint with the relevant data protection authority, if you think that any of your rights have been infringed by us. We can, on request, tell you which data protection authority is relevant to the processing of your personal information. You can exercise those rights by emailing email@example.com
Please note that whilst you may exercise these rights, there may be circumstances where we are legally entitled to refuse a request to exercise your rights. Generally this is when your attempt to exercise your rights infringe on another’s rights, or when we must retain certain types of information for business or legal purposes.
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at firstname.lastname@example.org. We will do our best to promptly correct any information found to be incorrect.
By using this site, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our site. Your continued use of the site following the posting of changes to this policy will be deemed your acceptance of those changes.
This document was last updated on Oct 20, 2023